Malicious code in publish-prompts-dynamo-firebase (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bc122cc572c3d2d1191ceaaf9b9258aad88aba7da7c0c08509fe79058b68496 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in proxima-norma-quantum-eridanus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 070c510d6aabd42a9359f70a061481de692e33fe124a1af5ee60137ae925f95b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145314 Malicious code in nconf-enif-tethys-europa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 868498dacc5038beed0a5eeeab2d2f82f9b34adb1db915a2f88d548d3d3f740e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144757 Malicious code in materialize-titan-start-morgan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f008e3b88825c9a54a226f489afb5844e6528c5993f15a38561ed9d9583853fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142540 Malicious code in fomalhaut-ganymede-yildun-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7b8a7a0c5fcaed29a0f050cad3ab42d3b08497f20cd9f832ae73151d9fb0856f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147416 Malicious code in reveal-md-mdx-geckodriver-callback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a1e66a65f7c92871312341129ec9fa61d291bde4e1563ac61a81dac4d5fb3e7d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146250 Malicious code in pino-regulus-centaurus-equinox (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af60b4baeebc6f1eb35835dfcc99efcff2726fe3992c0c7b2dd0d6519cc5551f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-146422 Malicious code in postcss-slides-browserify-less-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7ed32228acec370c873c86c008e03a58d16a799b4df31c1b515a25cd13ab56bc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147312 Malicious code in request-server-ariel-sirius (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ab9456315197599ddcea0392f87eea221db5072caa463e66a4a04e562bad81a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142032 Malicious code in enceladus-pm2-metalsmith-apollo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd6535d0df808138b8c1274dc7cc91e10777d5e12474f13dd805e3e6828a0e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in weywot-triton-wolf-sedna (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 323c76a23fb4b2ec2a76ff4c94f687642511b026eacfe0b07ee54c8f8ec80fec This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141276 Malicious code in cross-env-yakutsk-octans-graphql (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ec258cbc55d95a4aa0c35968e62956f226510e7535d823debd9ec5c976ed91e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149151 Malicious code in virgo-cache-chai-spectron (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector afd5e75f1dc520c9e3c5527da3ac7c209be59d8b37027452fc635b60481ef591 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144608 Malicious code in lyra-grus-csv-dotenv-parse-variables (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e23074145049a720e304aacae238b9e6e91e6e85a207ebbd06a7a074a4f7fa95 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142877 Malicious code in geckodriver-nuxtjs-typeorm-virgo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2930cfb3b48567b4f11af36b177f077dd690840f10b74887c4e301a2e747b364 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-149183 Malicious code in vortex-hyperion-chariklo-fork (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 39ffb0574747e317160ee377a0984d32a00b5da31f25184452bc5b52ba40041c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145115 Malicious code in module-run-script-telesto-writable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aae8e775647732194d6b76c1473464110ee5ca19028fc5f1464b33e020e37ce4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142309 Malicious code in event-deimos-mini-css-extract-plugin-mira (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 10ae3339de31987245b0464e66994d4f5c09550d0710bd98c8ce08bb3c24c76d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141707 Malicious code in dotenv-enif-carina-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6246769778c7fcba8c511e8df6a134d3b68f727a2080940cc9609ecaa912b2a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140569 Malicious code in ceres-kronos-warp-got (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46463893d487d5780c5b22490344844b9a5e96f1b8502d896a2839501e0e8b79 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...